CVE-2024-55896 MEDIUM

CVE-2024-55896: IBM PowerHA SystemMirror for i clickjacking

Vendor Ibm

Product i

Weakness CWE-451

Published January 3, 2025

Last update January 6, 2025

View on NVD All CVEs

CVSS base score

5.4/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames. This vulnerability could allow an attacker to gain improper access and perform unauthorized actions on the system.

Key dates

02Disclosure timeline

January 3, 2025 CVE published

January 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-55896 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/451.html

Related vulnerabilities

04Related CVE

CVE-2021-41598 UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user CVE-2026-32971 OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands CVE-2026-9106 UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management via undisclosed OAuth scope on consent screen CVE-2026-48851 CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode